Network error after NIMDA attack

[Mvega]

Our server is running Windows NT 4.0. A couple of weeks ago we got NIDAM virus. We did remove it. Recently when someone try to print or to logon we get the message "Unknown network error". This happens randomly.

Does someone have a clue?

If this related to NIDAM?

How can I reinstall Windows NT server 4.0 and not loose my data, users, etc?

Will appreciated any suggestions.

Thanks in advance,

Mvega

 

[Max19]

You could reinstall the server and restore your data from back up.

 

[Mvega]

We just reinstalled NT. All users can log on, but none of them can access their respective directories. Access right has been granted. Only users within the administrators group can access directories and files.

What can be wrong? Help!!

 

[twisted_by_you]

you may have to redo all the user accounts. if you got rid of nimda with Norton, the fix program deletes all network shares and such things like that. because that is how the nimda spreads. ALSO, there is a file you must delete EVERY instance of and replace called riched20.dll. i dont know if you did that but if you don't the virus will just keep coming back.

 

[Mvega]

Thanks,

We didn't removed riched20.dll, but w'll do.

After we reset all users accounts and network shares everything start working okay.

Thanks a lot

 

[twisted_by_you]

Okay do not forget that you have to put that riched20.dll file back on the system because its a system file that windows and office use (assuming you have office). You will get a bunch of memory errors if you don't put it back. I don't know exactly how to extract it from NT4 but here is a link to extract the the file for NT4

http://www.symantec.com/avcenter/venc/data/w32.nimda.e@mm.removal.tool.html